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1.Which command is used to convert a JKS keystore to PKCS12? 

A. Keytool-importkeystore Csrckeystore keystore p12-srcstoretype PKCS12 
Cdestkeystore keystore.jks Cdeststoretype JKS 

B. Keytool-importkeystore Csrckeystore keystore p12-srcstoretype JKS 
Cdestkeystore keystore.p12 Cdeststoretyoe PKCS12 

C. Keytool-importkeystore Csrckeystore keystore jks-srcstoretype JKS Cdestkeystore 
keystore.p13 Cdeststoretype PKCS12 

D. Keytool-importkeystore Csrckeystore keystore jks-srcstoretype PKCS12 
Cdestkeystore keystore.p12 Cdeststoretype JKS 

Answer: B 

Explanation: 

To convert a JKS keystore to PKCS12, the developer needs to use the keytool- 
importkeystore command with the following options: -srckeystore keysiore. jks 


-srcstoretype JKS -destkeystore keystore.p12 -deststoretype ee 

PKCS12. This command imports all entries from a source JKS keystore (keystore.jks) 
into a destination s” 

PKCS12 keystore (keystore.p12). < 


References: https://docs.oracle.com/en/java/javase/1 1ig8is/keytool html#GUID-5990 
A2E4-78E3-47B7-AE75-6D1 8262595 


2.When a client and server are exchanging messages during the mTLS handshake, 
what is being agreed on during the cipher, suite exchange? 


A. A protocol Ka 
B. The TLS version | 
C. An encryption algorithm Ka 
D. The Public key format e° 
Answer: C o 

$ 
Explanation: a$ 


A cipher suite is a set of cryptographic algorithms that are used to secure the 
communication be ween a client and a server. A cipher suite consists of four 
components: a exchange algorithm, an authentication algorithm, an encryption 
algorithm, and message authentication code (MAC) algorithm. During the cipher 
suite exchange, the client and the server agree on which encryption algorithm to use 
for encrypting and decrypting the data. 

References: https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#cipher- 
suites 


3. The flow is invoicing a target API. The API’s protocol is HTTPS. The TLS 
configuration in the HTTP Request Configuration global element is set to None. A 
web client submits a request to http:localhost:8081/vehicles. 


* vehicles-flow 


m 


HTTP:GET / HTTPS:GET / Payload 


vehicles getalimakes 
> Error handling 
Configuration 
Protocol: HTTPS v | 
Host: fe ${vehicle.api.host} | 
Port: fe $(vehicle.api.port} 
@ Use persistent connections 
Max connections: -1 


Connection idle timeout: 30000 
C) Stream response 
Response buffer size: |1024 
TLS Configuration None v 


If the certificate of the target API is signed by a certificate authority (CA), what is true 
about the HTTP Request operation when the flow executes? 

A. The HTTP Request operation will succeed if the CA’S certificate is present in the 
JRE’s default keystore 

B. The HTTP Request operation will succeed if the CA’s certificate is present in the 
JRE’s default truststore. 

C. The HTTP Request operation will always succeed regardless of the CA 

D. The HTTP Request operation will always fail regardless of the CA 

Answer: B 

Explanation: 

The HTTP Request operation will use the default truststore of the JRE to validate the 
certificate of the target API. If the CA’s certificate is present in the truststore, the 
operation will succeed. Otherwise, it will fail with a handshake exception. 
References: https://docs.mulesoft.com/mule-runtime/4.3/tIs-configiration#tls-default 
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4.Refer to the exhibit. <$ 
Ñ 


4 
neme=“inplementotion”™ 


sise-e doc: nane="Ratse error” type="APP:CUSTOM_ERROR™ 


t namee“stort-up-test” descriptione"Jest thet Mule app storts up™ expectedErrorTypee “APP: CUSTOM ERROR™> 


doc: namee “implementation” nanee"implenmentation”/> 


t-thet doc:name="Assert thot” expression="af[true)” is="#[MunttTools: :equolTo(false))” 
oO 


Mond 
The flow name is *implemegtation” with code for the MUnit test case. 
When the MUnit test cas¢‘is executed, what is the expected result? 
A. The test case fails } with an assertion error 
B. The test throws error and does not start 
C. The test casesfails with an unexpected error type 
D. The test case passes 
Answer: A 
Explanation: 
Based on the code snippet and MUnit test case below, when the MUnit test case is 
executed, the expected result is that the test case fails with an assertion error. This is 
because the assert-equals processor compares two values for equality, and fails if 
they are not equal. In this case, the expected value is ‘Hello World’, but the actual 
value returned by the implementation flow is ‘Hello Mule’. Therefore, the assertion 
fails and an error is thrown. 
References: https://docs.mulesoft.com/munit/2.3/assert-equals-processor 


5.A Mule application need to invoice an API hosted by an external system to initiate a 
process. The external API takes anywhere between one minute and 24 hours to 
compute its process. 
Which implementation should be used to get response data from the external API 
after it completes processing? 
A. Use an HTTP Connector to invoke the API and wait for a response 
B. Use a Scheduler to check for a response every minute 
C. Use an HTTP Connector inside Async scope to invoice the API and wait for a 
response 
D. Expose an HTTP callback API in Mule and register it with the external system 
Answer: D 
Explanation: so 
To get response data from the external API after it completes processing, the 
developer should expose an 
HTTP callback API in Mule and register it with the external sygtfm. This way, the 
external API can invoke the callback API with the respons @ata when it is ready, 
instead of making the Mule application wait for a long tig or poll for a response 
repeatedly. 
References: https://docs.mulesoft.com/mule- runtime, 3/http-listener-ref#callback 
s? 

£ 
6.When registering a client application within existing API instance or API Group 
instance, what is required to manually agbrove or reject request access? 
A. To configure the SLA tier for the application and have the role of Organization 
Administrator, API Manager yore Administrator, or the Manage Contacts 
permission 
B. To configure the SLA tog d8r the application and have the Exchange Administrator 
permission Ki 
C. To configure the SLA tier for the application 
D. To only have T pange Administrator permission 
Answer: A P 
Explanation: 
To manually approve or reject request access when registering a client application 
with an existing API 
instance or API Group instance, it is required to configure the SLA tier for the 
application and have one of the following roles or permissions: Organization 
Administrator, API Manager Environment Administrator, or Manage Contracts 
permission. These roles or permissions allow managing client applications and 
contracts in API Manager. 
References: https://docs.mulesoft.com/api-manager/2.x/client-applications#managing- 
client-applications-and-contracts 


7.A Mule application defines as SSL/TLS keystore properly 
‘tis, keystore.keyPassword” as secure. 
How can this property be referenced to access its value within the application? 
A. #{secure::tiskeystore,keyPassowrd} 
B. ${secure::tiskeystore,keyPassowrd} 
C. ${secure::tiskeystore,keyPassowrd} 
D. p{secure::tiskeystore,keyPassowrd} 
Answer: B 
Explanation: 
secure: :tiskeystore,keyPassowrdShor : 
ofCorrectAnswerOnly:Toreferenceasecurepropertyvaluewithin 
In this case, the property name is tiskeystore,keyPassword, so the corgect syntax is 
${secure::tiskeystore,keyPassowrd}. Pa 
References: https://docs.mulesoft.com/mule-runtime/4.3/secure- Snfiguration- 
properties#referencing-secure-properties s” 
rd 
we 
8.Which configurations are required for HTTP Listener'to enable mTLS 
authentication? a 
A. Set an appropriate reconnection strategy andfise persistent connections for the 
listener £ 
B. Set an appropriate keystore configuratigt? and use persistent connections for the 
listener Kai 
C. Set an appropriate keystore and tefststore configuration for the listener 
SS, ; 
D. Set an appropriate truststore cenfiguration and reconnection strategy for the 
listener Ps 
Answer: C Kal 
z $ 
Explanation: a$ 
To enable mTLS authgfttication for HTTP Listener, the developer needs to set an 
appropriate keystore’and truststore configuration for the listener. The keystore 
contains the certificate and private key of the Mule application that are used to prove 
its identity to cènts. The truststore contains the certificates of trusted clients that are 
allowed to access the Mule application. 
References: https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#mutual- 
authentication 


9.Which statement is true about using mutual TLS to secure an application? 

A. Mutual TLS requires a hardware security module to be used 

B. Mutual TLS authenticates the identity of the server before the identity of the client 
C. Mutual TLS ensures only authorized end users are allowed to access an endpoint 
D. Mutual TLS increases the encryption strength versus server-side TLS alone 


Answer: B 

Explanation: 

Mutual TLS (mTLS) is an extension of TLS that requires both parties (client and 
server) to present their certificates to each other during the handshake process. This 
way, both parties can verify each other’s identity and establish a secure connection. 
The authentication of the server happens before the authentication of the client, as 
the server sends its certificate first and then requests the client’s certificate. 
References: https://docs.mulesoft.com/mule-runtime/4.3/tls-configuration#mutual- 
authentication 


10.Which type of cache invalidation does the Cache scope support without having to 
write any additional code? 
A. Write-through invalidation £ 
B. White-behind invalidation © 
C. Time to live & 
D. Notification-based invalidation K 
> 
Answer: C Ea 
RO 
Explanation: Rà 
The Cache scope supports time to live (TTL) as a 1 géiche invalidation strategy without 
having to write any additional code. TTL specifies” how long the cached response is 
valid before it expires and needs to be refreshed. The Cache scope also supports 
custom invalidation strategies using MEL g@fData Weave expressions. 
References: https://docs.mulesoft.com/niule- runtime/4.3/cache- 


scope#cache_invalidation ee 
wW 
O 
oe 
o 
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11.Refer to the exhibit. = 4 
$ 
a 
i logd F. pT 


dinal version="1.0" encoding=" vti -8" > 


What action must be performed to log all the errors raised by the VM Connector? 
A. Add <AsyncLOgger name='orgroute.extensions vm’ level=ERROR'I> inside the 
Logger tag 
B. Add <AsyncLOgger name='orgroute.extensions vm’ level=ERROR’> inside the 
Appenders tag 
C. Configure <Logger level-‘ERROR’/> inside the VM Connector configuration 
D. Nothing, as error-level events are automatically logged 
Answer: B 
Explanation: 
To log all the errors raised by the VM Connector, the developer needs to add an 
async logger with the name ‘org.mule.extension.vm’ and the level ‘ERROR’ inside 
the appenders tag of the log4j2.xml file. This will enable logging all error-level events 
generated by the VM Connector to the console appender. Se 
References: https://docs.mulesoft.com/mule-runtime/4.3/logging-in-gaule#configuring- 
custom-logging-settings of S 

& 
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12.A healthcare portal needs to validate the token that it $énds to a Mule API. The 
developer plans to implement a custom policy using thé HTTP Policy Transform 
Extension to match the token received in the headgt from the heathcare portal. 
Which files does the developer need to create ig Order to package the custom policy? 
A. Deployable ZIP file, YAML configuration fi 
B. JSON properties file, YAML configuratigs file 
C. JSON properties file, XML template fie 
D. XML template file, YAML configutefion file 
Answer: D ca 
Explanation: ee 
To package a custom policy. sing the HTTP Policy Transform Extension, the 
developer needs to creatg*an XML template file and a YAML configuration file. The 
XML template file defipés the policy logic using Mule components and placeholders 
for user-defined properties. The YAML configuration file defines the metadata of the 
policy, such as itshame, description, category, parameters, and dependencies. 
References: htfos://docs.mulesoft.com/api-manager/2.x/http-policy- 
transform#packaging-the-policy 


13.Refer to the exhibit. 


& @ Global Element Properties 


HTTP Listener config 


Configuration element for a MttpListene 


General Notes Help 


Name: a HTTP _Ustenet contig 


Connection 


General TLS Advanced 


TLS Configuration Edt irine 8 


Trust Store Configuration 


Path: 

Password Show password 
Type: o 
Aigonthm 


q t Insecure 


? Test Connecter Cance oS) 


> 


v 


@ 
What is the result if “ifisecure” selected as part of the HTTP Listener 
configuration?  «® 
A. The HTTP L48tener will trust any certificate presented by the HTTP client 
B. The HTTP Lister will accept any unauthenticated request 
C. The HTTP listener will only accept HTTP requests 
D. Mutual TLS authentication will be enabled between this HTTP Listener and an 
HTTP client 
Answer: C 
Explanation: 
Based on the exhibit below, if ‘Insecure’ is selected as part of the HTTP Listener 
configuration, the HTTP 
listener will only accept HTTP requests. This means that no TLS context will be 
configured for this listener 


and no encryption or authentication will be applied to incoming requests. The protocol 
attribute of this listener will be set to HTTP instead of HTTPS. 
References: https://docs.mulesoft.com/http-connector/1.6/http-listener-ref#insecure 


14.A mule application exposes and API for creating payments. An Operations team 
wants to ensure that the Payment API is up and running at all times in production. 
Which approach should be used to test that the payment API is working in 
production? 

A. Create a health check endpoint that listens on a separate port and uses a separate 
HTTP Listener configuration from the API 

B. Configure the application to send health data to an external system 

C. Create a health check endpoint that reuses the same port number gna HTTP 
Listener configuration as the API itself 

D. Monitor the Payment API directly sending real customer paymeit data 

Answer: A s 

Explanation: od 

To test that the payment API is working in production, thé‘eveloper should create a 
health check endpoint that listens on a separate port é afid uses a separate HTTP 
Listener configuration from the API. This way, the 2 déveloper can isolate the health 
check endpoint from the API traffic and avoid affecting the performance or availability 
of the API. The health check endpoint should-téturn a simple response that indicates 
the status of the API, such as OK or ERRQR. 

References: https://docs.mulesoft. com/api- functional-monitoring/afm-create- 


monitor#create-a-monitor oe 


ra 
15.A Mule API receives a JÖN payload and updates the target system with the 
payload. The developer yses JSON schemas to ensure the data is valid. 

How can the data be ydi dation before posting to the target system? 

A. Use a DataWeax® 2.09 transform operation, and at the log of the DataWeave 
script, add: Ydw.2.0 

Import.json-moduls 

B. Using the DataWeave if Else condition test the values of the payload against the 
examples included in the schema 

C. Apply the JSON Schema policy in API Manager and reference the correct schema 
in the policy 

configuration 

D. Add the JSON module dependency and add the validate-schema operation in the 
flow, configured to reference the schema 

Answer: D 

Explanation: 

To validate the data before posting to the target system, the developer should add the 


JSON module dependency and add the validate-schema operation in the flow, 
configured to reference the schema. The JSON module provides a validate-schema 
operation that validates a JSON payload against a JSON schema and throws an error 
if the payload is invalid. 

References: https://docs.mulesoft.com/json-module/1.1/json-validate-schema 


16.Which statement is true when using XML SDK for creating custom message 
processors? 

A. Properties are fields defined by an end user of the XML SDK component and serve 
as a global configuration for the entire Mule project in which they are used 

B. An XML SDK provides both inbound and outbound operations 


C. Operations can be reused in recursive calls SS 
D. All operations are public Pa 
Answer: C < 
Explanation: s 


When using XML SDK for creating custom message processors, all operations are 
public by default and can be used by any Mule applicatio that imports them. There is 
no way to make an operation private or protected in XML SDK. 
References: https://docs.mulesoft.com/mule- sdk/t afixml- -sdk#operations 

ra 
17.A Mule application for processing ordegs‘must log the order ID for every log 
message output. Ka 
What is a best practice to enrich every log message with the order ID? 
A. Use flow variables within ever dogger processor to log the order ID 
B. Set a flow variable and eal fe log4/2.xml file to output the variable as part of the 
message pattern 
C. Create a custom usk component to wrap the logger processor and 
automatically add the gtder ID within the connector 
D. Use the Tracing etodule to set logging variables with a Mapped Diagnostic Context 
Answer: D a 
Explanation: 
To enrich every log message with the order ID, the developer should use the Tracing 
module to set logging variables with a Mapped Diagnostic Context (MDC). The 
Tracing module allows adding custom key-value pairs to log messages using MDC 
variables. The developer can use Set Logging Variables operation to set the order ID 
as an MDC variable and then use it in any logger processor within the same thread or 
event. 
References: https://docs.mulesoft.com/tracing-module/1 .0/tracing-module- 
reference#set-logging-variables 


18.Refer to the exhibit. 


Project Settings 


Create a Mule proyect in the workspace of on an external location 


Project Neme new- orc dll - pecvect] 


Runtime 


Mule Server 44.0 Ef 


Mde Server 4 ff 


mane i 


API implementation 


Add en AM wrglemerteticn to your pr pect to aomata Dy set up an AS nt router ood create placeholder flows for each resource method 


8 Dude shed AP npor RAML trom local file Cownlcoad RAML trom Des on Cente 


buiding API enplementatom by enportng the spectxston here Lean more 


When creating a new project, which API implementation allows for selecting the 
correct API version and scaffolding the flows ten the API specification? 

A. Import a published API 

B. Generate a local RAML from anypoini,aflidio 

C. Download RAML from Design Cente” 

D. Import RAML from local file o° 

Answer: A Ka 

Explanation: B 

To create a new project thasSelects the correct API version and scaffolds the flows 
from the API specification, the developer should import a published API. This option 
allows importing an APf specification that has been published to Anypoint Exchange 
or Design Center, gd selecting a specific version of that API specification. The 
developer can Also choose to scaffold flows based on that API specification. 
References: https://docs.mulesoft.com/apikit/4.x/apikit-4-new-project-task 


19.A company has been using CI/CD. Its developers use Maven to handle build and 
deployment activities. 

What is the correct sequence of activities that takes place during the Maven build and 
deployment? 

A. Initialize, validate, compute, test, package, verify, install, deploy 

B. Validate, initialize, compile, package, test, install, verify, verify, deploy 

C. Validate, initialize, compile, test package, verify, install, deploy 


D. Validation, initialize, compile, test, package, install verify, deploy 

Answer: C 

Explanation: 

The correct sequence of activities that takes place during the Maven build and 
deployment is validate, initialize, compile, test package, verify, install, deploy. These 
are Maven lifecycle phases that define a sequence of goals to execute during a build 
process. Each phase represents a stage in the build lifecycle and can have zero or 
more goals bound to it. 

References: https://maven.apache.org/guides/introduction/introduction-to-the- 
lifecycle.html 


20.Multiple individual Mute application need to use the Mule Maven plygin to deploy 
to CloudHub. 

The plugin configuration should .. reused where necessary and apvthing project, 
specific should be property-based. s 
Where should the Mule Maven details be configured? Ká 


A. A parent pom.xml 


B. Settings, xml © 
C. Pom, xml Ka 

D. A Bill of Materials (BOM) parent pm Ead 
Answer: A Fad 
Explanation: R 


To reuse Mule Maven plugin ongia. across multiple individual Mule 
applications, the developer should ugé a parent pom.xml file. A parent pom.xml file 
defines common configuration forgane or more child projects that inherit from it. The 
developer can specify common properties and dependencies for all child projects in 
the parent pom.xml file, sug|é"as Mule Maven plugin configuration, and then reference 
them in each child projec® pom.xml file using placeholders. 

References: 

https://docs.mules Com/mule-runtime/4.3/mmp-concept#parent-pom 
https://maven.apache.org/guides/introduction/introduction-to-the- 
pom.html#Projéct_Inheritance 
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